Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File:                     PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier:          fbcoCBntvQZ4G+ZJoDliBIEifpZtG6Mj3cayfwYSvog=
Subject key identifier:   FC:52:72:C7:6A:C4:F0:E4:65:F1:CA:4E:C5:D2:97:81:EE:86:22:8F
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer:       /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial:       018F877F41B27E85E6009A66DDA3BEF34E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number:          57
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: E338zGdXiRW1OvOYkR4UK-nzOyA.roa (hash: 3Xv5A7MXPITCFs5yFaXu7gR2F124U+WV+I7E3edZbLI=)
                          2: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: UdjDrO2xvJUC/oUzA0jRs0TUgmUUlY21wCFGhqzDlow=)
                          3: VlTT1dy1WFmzngAIOt6eOU4ruW0.roa (hash: bZrtircxafkqX3jF8nkc2hevazawX9YP7K68mamd7eg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:41:b2:7e:85:e6:00:9a:66:dd:a3:be:f3:4e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=fc5272c76ac4f0e465f1ca4ec5d29781ee86228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:6e:6b:31:5b:c8:be:8c:13:11:47:e6:29:
                    3a:f4:7f:8e:d6:38:96:f7:46:cb:a2:f9:a4:55:41:
                    d0:b2:2d:ee:37:df:19:c3:0e:df:c0:ab:3c:74:d8:
                    eb:6f:5a:68:bb:55:68:a6:08:71:fd:74:46:d1:81:
                    58:a9:79:80:43:aa:4c:aa:d6:78:e1:d0:12:e6:4d:
                    98:e0:2b:14:a0:bf:77:ad:a7:a5:66:b1:a1:ad:82:
                    8e:bc:50:78:87:12:19:ab:9e:cf:04:cd:13:25:0e:
                    c3:c1:01:41:7e:1f:15:14:d5:42:4a:b6:e6:3b:57:
                    3b:fb:9f:24:6f:1e:fb:de:d5:d2:b2:0b:d0:dc:ac:
                    94:2b:5f:bf:1d:d7:3c:3a:93:ba:d2:80:74:7d:e5:
                    8f:50:98:33:cf:2b:fc:0b:e1:96:59:21:b1:e5:77:
                    51:f3:4f:c3:ad:f4:f4:57:18:1f:a6:79:55:31:39:
                    58:cb:79:27:50:71:80:82:07:de:4f:32:8b:5e:7b:
                    79:09:45:b0:49:38:3e:35:7f:a4:cc:2d:7f:24:26:
                    30:93:b4:11:2c:11:23:6a:6b:ee:68:ad:01:51:18:
                    7c:f9:85:4e:5a:5f:d7:65:5b:1e:ae:86:5c:cb:5a:
                    81:31:79:a0:f2:79:1c:89:b6:87:af:03:2b:ca:b9:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:72:C7:6A:C4:F0:E4:65:F1:CA:4E:C5:D2:97:81:EE:86:22:8F
            X509v3 Authority Key Identifier:
                keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:83:e0:dd:3b:d7:4f:d5:4b:e4:68:de:70:67:14:1b:43:
         88:49:cc:e6:fa:0a:c4:57:cc:fa:85:c2:0e:d1:d0:cc:37:27:
         21:f3:17:85:6e:93:48:9b:b0:33:22:1a:b3:62:1f:99:88:98:
         d6:b6:92:f1:5c:0c:43:c0:8c:ce:fd:5d:c0:17:b2:b1:e6:c4:
         85:b3:58:6a:de:84:d1:21:a4:11:b9:9b:1e:2a:72:96:2a:a5:
         8f:b0:50:17:00:c2:43:7e:ba:81:c7:b8:dc:c0:60:2c:a1:79:
         79:46:56:41:2e:01:f2:df:f3:6b:ab:51:a4:3a:4e:c3:15:9b:
         aa:85:e3:82:e6:f2:cf:4d:3e:9b:a7:df:47:f6:27:d5:a0:4e:
         1c:09:6d:4f:27:43:8b:93:c6:48:9e:83:59:74:15:d1:06:24:
         0b:3e:ec:50:47:f2:f8:71:76:f9:06:d7:d6:ff:ed:cc:0a:67:
         22:cb:71:10:93:39:70:72:56:a4:65:90:bd:bb:79:72:d0:0f:
         8f:2c:6a:03:58:21:55:80:c1:9f:5f:67:d8:ac:57:a0:3f:91:
         df:50:1d:73:48:7e:b5:82:be:93:38:91:be:9a:68:ce:6d:f0:
         27:ed:4c:00:67:16:b9:33:be:03:92:63:48:fe:ee:33:f5:36:
         67:2f:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:30:26 2024 by rpki-client on console-fra.rpki-client.org